Fig. 1 Fault-Tree Analysis